Malwarebytes mouse hook

[Jagg]

Online Armor reports a Hook_Mouse in MSVBVM60.DLL by mbam.exe. What's that
about?

[Dustin]

Jagg <jagg@it.invalid> wrote in
news:ujod0tq3sagx.e8tzhccvuicw$.dlg@40tude.net:

> Online Armor reports a Hook_Mouse in MSVBVM60.DLL by mbam.exe.
> What's that about?

A false alarm with Online Armor.




--
Why drink the water from my hand?
Contagious as you think I am
Just tilt my sun towards your domain
Your cup runneth over again

[~BD~]

Dustin wrote:
> Jagg<jagg@it.invalid> wrote in
> news:ujod0tq3sagx.e8tzhccvuicw$.dlg@40tude.net:
>
>> Online Armor reports a Hook_Mouse in MSVBVM60.DLL by mbam.exe.
>> What's that about?
>
> A false alarm with Online Armor.


I do so wish you would provide evidence of your assertions!

Here's some! http://www.threatexpert.com/files/msvbvm60.dll.html

HTH

[David H. Lipman]

From: "~BD~" <~BD~@nomail.afraid.com>

> Dustin wrote:
>> Jagg<jagg@it.invalid> wrote in
>> news:ujod0tq3sagx.e8tzhccvuicw$.dlg@40tude.net:
>>
>>> Online Armor reports a Hook_Mouse in MSVBVM60.DLL by mbam.exe.
>>> What's that about?
>>
>> A false alarm with Online Armor.
>
> I do so wish you would provide evidence of your assertions!
>

Stay out of it BD, that doesn't mean sh!t and is NO evidence.



--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[G. Morgan]

Jagg wrote:

>Online Armor reports a Hook_Mouse in MSVBVM60.DLL by mbam.exe. What's that
>about?

That is a legit Windows file, it's a Visual Basic virtual machine
handler. Check the checksums and make sure your's is the original
file.

[Jagg]

On Mon, 13 Jun 2011 07:32:33 -0500, G. Morgan wrote:


>
> That is a legit Windows file, it's a Visual Basic virtual machine
> handler. Check the checksums and make sure your's is the original
> file.

I know it is a legit file, I'm talking about mbam.exe using a mouse hook
into it. Maybe mbam.exe does that to monitor a users mouse movements? I
don't know.

[David H. Lipman]

From: "Jagg" <jagg@it.invalid>

> On Mon, 13 Jun 2011 07:32:33 -0500, G. Morgan wrote:
>
>> That is a legit Windows file, it's a Visual Basic virtual machine
>> handler. Check the checksums and make sure your's is the original
>> file.
>
> I know it is a legit file, I'm talking about mbam.exe using a mouse hook
> into it. Maybe mbam.exe does that to monitor a users mouse movements? I
> don't know.

Ummmm... more like so MBAM can use a mouse in the GUI.


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[Jagg]

On Mon, 13 Jun 2011 18:09:48 -0400, David H. Lipman wrote:


> Ummmm... more like so MBAM can use a mouse in the GUI.

Almost all Windows apps can use a mouse in the GUI but don't set off a
mouse hook alert in Online Armor.

[G. Morgan]

Jagg wrote:

>On Mon, 13 Jun 2011 07:32:33 -0500, G. Morgan wrote:
>
>
>>
>> That is a legit Windows file, it's a Visual Basic virtual machine
>> handler. Check the checksums and make sure your's is the original
>> file.
>
>I know it is a legit file, I'm talking about mbam.exe using a mouse hook
>into it. Maybe mbam.exe does that to monitor a users mouse movements? I
>don't know.

I don't see why it would, plus Dustin used to work there and he said it
didn't. If it had a mouse hook and Keylogger, I'm sure someone would
have caught that by now.

[David H. Lipman]

From: "G. Morgan" <G_Morgan@easy.com>

> Jagg wrote:
>
>> On Mon, 13 Jun 2011 07:32:33 -0500, G. Morgan wrote:
>>
>>> That is a legit Windows file, it's a Visual Basic virtual machine
>>> handler. Check the checksums and make sure your's is the original
>>> file.
>>
>> I know it is a legit file, I'm talking about mbam.exe using a mouse hook
>> into it. Maybe mbam.exe does that to monitor a users mouse movements? I
>> don't know.
>
> I don't see why it would, plus Dustin used to work there ...

As well did I :-)

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp